Most recent entries from csaf_phoenixcontactgmbhcokg

VDE-2017-001 — PHOENIX CONTACT: mGuard IKE daemon remote denial of service

Tue, 07 Mar 2017 11:05:00 +0000

Openswan 2.6.39 and earlier, which is used in the mGuard firmware version 8.0.0 to 8.5.1, allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.

VDE-2017-002 — PHOENIX CONTACT: mGuard device manager (mdm) multiple vulnerabilities in Java SE

Thu, 07 Sep 2017 07:00:00 +0000

Multiple security issues and vulnerabilities in Oracle Java SE possibly affecting mGuard device manager (mdm / FL MGUARD DM) 1.8.0 and older.

VDE-2017-003 — PHOENIX CONTACT: WLAN enabled devices utilising WPA2 encryption

Thu, 09 Nov 2017 16:20:00 +0000

Multiple security issues and vulnerabilities within the WPA2 standard have been identified and publicized by Mr. Mathy Vanhoef of KU Leuven. These vulnerabilities may allow the reinstallation of a pairwise transient key, a group key, or an integrity key on either a wireless client or a wireless access point (AP). In consequence, an attacker could establish a man-in-the-middle position between AP and client facilitating packet decryption and injection.

Update A / Revision 2 - 2017-11-09 * Added a detailed list of affected products

Update B / Revision 3 - 2018-09-24 * Added firmware update information, see section "Solution"

VDE-2017-004 — PHOENIX CONTACT: FL COMSERVER cross-site scripting (XSS) vulnerability

Tue, 05 Dec 2017 08:50:00 +0000

A cross-site scripting (XSS) vulnerability affects PHOENIX CONTACT FL COMSERVER products running firmware versions prior to 1.99, 2.20, or 2.40.

VDE-2017-006 — PHOENIX CONTACT: FL SWITCH 3xxx/4xxx/48xx series web-service authentication bypass

Wed, 10 Jan 2018 09:36:00 +0000

PHOENIX CONTACT FL SWITCH 3xxx series, FL SWITCH 4xxx series, and FL SWITCH 48xx series products running firmware version 1.0 to 1.32 allow unauthenticated users with network access to gain administrative privileges (CVE-2017-16743) and expose information to unauthenticated users in Monitor Mode (CVE-2017-16741).

VDE-2018-001 — PHOENIX CONTACT: Advisory for mGuard products

Tue, 30 Jan 2018 09:00:00 +0000

The integrity of the mGuard firmware atomic update process cannot be guaranteed under all circumstances.

The mGuard atomic update mechanism relies on internal checksums for the integrity verification of some portions of the update packages. The verification of these internal checksums may not always be performed correctly.

VDE-2018-003 — PHOENIX CONTACT: addressing Meltdown and Spectre vulnerabilities

Fri, 23 Mar 2018 09:43:00 +0000

Several CPUs manufactured by Intel, AMD or based on ARM technology may leak information due to their internal operation if attacked by specifically written software executed on the affected systems.

The information in this advisory is based on the statements of respective manufacturers.

VDE-2018-004 — Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Command Injection

Wed, 16 May 2018 05:35:00 +0000

An attacker with permission to transfer configuration files to/from the switch or permission to upgrade firmware, is able to execute arbitrary OS shell commands. CGI applications config_transfer.cgi and software_update.cgi are prone to OS command injection through targeted manipulation of their web-request headers.

VDE-2018-005 — Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 allows Information Exposure

Wed, 16 May 2018 05:35:00 +0000

Web interface CGI applications may copy the contents of the running configuration file to a commonly accessed file. Clever manipulation of a web login request can expose the contents of this file through to the web browser. A successful web interface login attempt is not required to read the configuration file contents.

FL SWITCH Configuration File can be read by unauthenticated user.

VDE-2018-006 — Phoenix Contact: FL SWITCH 3xxx/4xxx/48xx series through 1.33 has a Stack-based Buffer Overflow

Wed, 16 May 2018 10:00:00 +0000

An attacker may insert a carefully crafted cookie into a GET menu_pxc.cgi or GET index.cgi request to cause a buffer overflow that can initiate a Denial of Service attack and execute arbitrary code.